Behavioral task
behavioral1
Sample
ffc674500f2894c86bc636c41ca4c4a121f082af1b2af4e1509c198974705543.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffc674500f2894c86bc636c41ca4c4a121f082af1b2af4e1509c198974705543.exe
Resource
win10v2004-20221111-en
General
-
Target
ffc674500f2894c86bc636c41ca4c4a121f082af1b2af4e1509c198974705543
-
Size
56KB
-
MD5
a722083bf6073ec33a15f17b29a1eb42
-
SHA1
9ad4cb02c1dd63a7e072f9ea7f11827f54353b78
-
SHA256
ffc674500f2894c86bc636c41ca4c4a121f082af1b2af4e1509c198974705543
-
SHA512
ee3eb1eb91734d3ee639ab8066044eb10be310137dbdb12ae947c67c37286a24ecc94fa01752ff02723ed70c8842104bf9ec239c12c93b41a39a9c7fa9ffde06
-
SSDEEP
768:IoOuroezTbrif3ptl2oxnfB+XzLnJDWmku/Mldg6GQ7sp5a9lzEJyjfCK:IYroezat/xezLxoXsba/zEJyv
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
ffc674500f2894c86bc636c41ca4c4a121f082af1b2af4e1509c198974705543.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
TEXT Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE